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ABSTRACT 

V.  Pratt  [18]  has  shown  that  the  real  and  integer  feasibility  of  sets  of  linear  inequali- 
ties of  the  form  x < y + c can  be  decided  quickly  by  examining  the  loops  in  certain  graphs. 
We  generalize  Pratt’s  method,  first  to  real  feasibility  of  inequalities  in  two  variables  and 
arbitrary  coefficients,  and  ultimately  to  real  feasibility  of  arbitrary  sets  of  linear  inequali- 
ties. The  method  is  well  suited  to  applications  in  program  verification. 
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1 . Introduction 

Procedures  for  deciding  whether  a given  set  of  linear  inequalities  has  solutions  often 
play  an  important  role  in  deductive  systems  for  program  verification.  Array  bounds 
checks  and  tests  on  index  variables  are  but  two  of  the  many  common  programming  con- 
structs that  give  rise  to  formulas  involving  inequalities.  A number  of  approaches  have 
been  used  to  decide  the  feasibility  of  sets  of  inequalities  (2.7,8.14.211.  ranging  from  goal- 
driven  rewriting  mechanisms  (251  to  the  powerful  simplex  techniques  (7]  of  linear  pro- 
gramming. Some  simple  methods  are  well  suited  to  the  small,  trivial  problems  that  most 
often  arise,  but  are  insufficiently  general.  Full-scale  simplex  techniques,  on  the  other  hand, 
are  general  and  fast  for  medium  to  large  problems,  but  do  not  take  advantage  of  the  trivial 
structure  of  the  small  problems  encountered  most  frequently. 

Tile  algorithm  presented  here  retains  the  generality  needed  in  the  exceptional  case, 
without  sacrifice  of  speed  and  simplicity  in  the  more  typical  situation.  It  builds  on 
V.  Pratt’s  observation  1 18.1b)  that  most  of  the  inequalities  that  arise  from  verification 
conditions  are  of  the  form  x < y + c,  where  x and  y are  variables  and  c is  a constant. 

Pratt  showed  that  a conjunction  of  such  inequalities  can  be  decided  quickly  by  examining 
the  loops  of  a graph  constructed  from  the  inequalities  of  the  conjunction.  We  generalize 
this  approach,  first  to  inequalities  with  no  more  than  two  variables  and  with  arbitrary 
coefficients,  and  then  to  arbitrary  linear  inequalities.  Our  generalization  reduces  to  Pratt's 
test  for  inputs  having  the  simple  structure  he  describes. 

The  discussion  is  presented  in  six  sections.  Sections  2 and  3 are  concerned  with  pre- 
liminary definitions  and  with  a statement  of  the  method  for  inequalities  with  two  vari- 
ables and  arbitrary  coefficients.  Section  4 discusses  issues  of  complexity  and  usefulness 
for  integer  problems,  and  relates  the  method  to  Pratt’s.  Sections  5 and  6 deal  with  the 
extension  of  the  method  to  sets  having  strict  inequalities  and  to  sets  with  arbitrary  linear 
inequalities.  The  last  section  presents  a proof  of  the  theorem  that  underlies  the  method. 
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Definitions 


■> 

Let  S be  a set  of  linear  inequalities  each  of  whose  members  can  be  written  in  the 
form  ax  + by  c.  where  x.  y are  real  variables  and  a.  b.  c are  reals.  Without  loss  of 
generality,  we  require  that  all  variables  appearing  in  S other  than  a special  variable  v0. 
called  the  zero  variable,  have  nonzero  coefficients.  We  also  assume  that  v()  appears  only 
with  coefficient  zero. 

Construct  an  undirected  multi-graph  G from  S as  follows.  Clive  Cl  a vertex  for  each 
variable  occurring  in  S and  an  edge  for  each  inequality.  Let  the  edge  associated  with  an 
inequality  ax  + by  c connect  the  vertex  for  x with  the  vertex  for  y.  Label  each  vertex 
with  its  associated  variable*  and  each  edge  with  its  associated  inequality.  G is  said  to  be 
the  graph  for  S. 

Now  let  P be  a path  through  G.  given  by  a sequence  v, , v, vn+1  of  vertices 

and  a sequence  e, . e, e of  edges,  n > 1.  The  triple  sequence  for  P is  given  by: 

(aj , b, , Cj).  (a, . b, . c,),  ....  <an . bn,  cn) 

where  for  each  i,  1 < i < n.  UjV.  + |rvj+  ^ < t\  is  the  inequality  labeling  e(.**  P is  admis- 
sible if,  for  1 < i < n - 1.  b.  and  aj+1  have  opposite  signs;  i.e..  one  is  strictly  positive  and 
the  other  is  negative. 

Intuitively,  admissible  paths  correspond  to  sequences  of  inequalities  that  form  tran- 
sitivity chains.  For  example,  the  sequence  x < y.  y < z,  z < 3 gives  rise  to  an  admissible 
path,  as  does 

:.x  > 3y  - 4.  2y  > 4 - z.  -z  > x . 

Note  that  the  sequence: 

x < y.  y < z.  -z  < r 


•In  what  follows,  it  is  notationallv  convenient  to  write  v for  both  the  variable  v ami  the  vertex  asso- 
ciated with  that  vanable. 

**ln  the  case  where  v(  and  vj+ 1 happen  to  be  identical  fi.e..  et  is  a self-loopi,  an  arbitrary  choice  is 
made  as  to  the  ordering  of  the  first  two  components  of  the  associated  triple. 


cannot  label  an  admissible  path,  since  the  coefficients  of  / have  the  wrong  relative 
signs. 

A path  is  a /<><>/>  if  its  first  and  last  vertices  are  identical.  A loop  is  simpi e if  its 
intermediate  vertices  are  distinct. 

Note  that  the  reverse  of  an  admissible  loop  is  always  admissible,  and  that  the  cyclic 
permutations  of  a loop  P are  admissible  if  and  only  if  a,  and  bn  are  of  opposite  sign, 
where  (a, . b, . c,  > . . . <a  , b . c ) is  the  triple  sequence  for  P.  In  this  case,  we  sav  P is 
permit  table.  Note  also  that,  since  v()  appears  in  S only  with  coefficient  0,  no  admissible 
loop  with  initial  vertex  v„  is  perinutable. 

Now  define,  for  a given  admissible  path  P,  the  residue  inequality  of  P as  the  inequality 
obtained  from  P by  applying  transitivity  to  the  inequalities  labeling  its  edges,  l-'or  example, 
it  the  inequalities  along  P are 

x < 2y  + 1 . y < 2 - 3z.  -z  < w . 


we  have: 


x < 2y  + 1 *£  2t  2 - 3z)  + I < 2(2  + 3wt  + 1 = ow  + 5 

The  residue  inequality  of  P is  thus  \ - tnv  ***  5. 

More  formally,  define  the  residue  r{1  of  P as  the  triple  <ap.  bp.  cp>  given  by: 

iaP.  bP.  cP>  = (a, . b| . c,>  * <a;,  b2,  Ci>  * ...  * (an.  bn,  cn> 

where  ta, . b, . C(>  . . . <an.  bn.  cn>  is  the  triple  sequence  for  P and  where  » is  the  binary 
operation  on  triples  defined  by: 

(a.  b.  c>  * <a\  b\  c’>  = \kaa’.  -kbb’.  ktea’  ~ c'b)> 

t 

and  k = -prr 

>a  I 

The  residue  inequality  of  P is  then  given  by  aP\  + bPy  cP,  where  \ and  y are  the  first 
and  last  vertices,  respectively,  of  P. 


T 


It  is  straight  tor  ward  to  show  that  • is  associative,  so  that  r,,  is  in  tact  unn|iiel>  defined. 
I he  idea  that  the  residue  inequality  of  a path  is  implied  by  the  inequalities  labeling  the  path 
is  expressed  in  the  following  lemma: 

Lemma  I.  Ain  point  ti.e.,  assignment  of  reals  to  variables)  that  satisfies  the  inequalities 
labeling  an  admissible  path  P also  satisfies  the  residue  inequality  of  P. 

Pf.  Straightforward  by  induction  on  the  length  of  P. 

3.  Procedure  lor  Inequalities  with  Two  Variables 

In  the  case  where  P is  a loop  with  initial  vertex,  say,  x.  Lemma  1 asserts  that  any 
point  satisfying  the  inequalities  along  P must  also  satisfy  a,,x  + bpx  < c,, . If  it  happens 
that  aP  + bP  - 0 and  cP  < 0,  the  residue  inequality  of  P is  false,  and  we  sav  that  P is  an 
infeasible  loop. 

It  follows  that  a set  S of  inequalities  is  unsatisfiable  if  the  graph  (3  for  S has  an 
infeasible  loop.  The  converse,  however,  does  not  hold  in  general.  Figure  1,  for  example, 
shows  the  graph  for  S * {x  < y.  2x  + y ^ 1.  i < x.  w «£  z.  i < 1 + w.  z > *:}.  Although 
S is  unsatisfiable.  the  graph  has  no  infeasible  loops,  simple  or  otherwise. 


W V i X V V 


FIGURE  1 GRAPH  G FOR  S * | x ^ v.  2x  * v 1.  z*4x,  w^z,  + 1.  i ^ 
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The  gist  of  our  main  theorem  is  that  G can  he  modified  to  obtain  a graph  G'  that 
has  an  infeasible  simple  loop  if  and  only  if  S is  unsatisfiable: 

Definition  Let  G be  the  graph  for  S.  Obtain  a closure  G'  of  G by  adding,  for  each 
simple  admissible  loop  P (modulo  permutation  and  reversal)  of  G a new  edge 
labelled  with  the  residue  inequality  of  P. 


Note  that  closures  are  not  necessarily  unique,  since  the  initial  vertex  of  each  permutable 
loop  can  be  chosen  arbitrarily. 

Theorem:  S is  unsatisfiable  if  and  only  if  G’  has  an  infeasible  simple  loop. 

Figure  2 shows  the  unique  closure  of  the  graph  of  Figure  1.  Note  that  the  only  loop 
of  G contributing  an  edge  to  G'  is  the  xyx  loop.  The  vQxzv0  loop  of  G'  is  infeasible  (hav- 
ing residue  (0.  0.  ->  _<>);  hence  the  example  S.  according  to  the  theorem,  must  be  unsatisfiable. 


We  show  later  that  any  cyclic  permutation  of  an  infeasible  permutable  loop  is  itself 
infeasible,  and  that  the  reverse  of  an  infeasible  loop  is  also  infeasible.  W’e  thus  have  the 
following  decision  procedure  for  satisfiability  of  S: 
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ill  The  simple  admissible  loops  v>t  li  are  enumerated  modulo  cyclic  permutation 
and  reversal,  and  their  residues  are  computed.  It  any  loops  are  found  to  be 
infeasible,  S is  unsatistiable. 

i ' i Otherwise.  the  closure  ot  ti  is  formed  by  adding  a new  edge  tor  each  residue 
inequality . Hie  residues  of  all  newly  formed  simple  admissible  loops  are  now 
computed.  If  any  are  found  to  be  infeasible.  S is  unsatistiable.  Otherwise  S 
has  solutions. 

Note  that  this  procedure,  as  stated,  does  not  actually  construct  a solution  it  S is 
feasible.  The  proof  of  the  mam  theorem,  given  in  Section  “.  provides  such  a construction. 
Note  also  that  the  new  admissible  loops  formed  in  t2l  must  have  initial  vertex  v0. 


4.  Efficiency  and  Other  Issues 

Any  implementation  of  the  procedure  must,  of  course,  incorporate  some  means  ot 
generating  the  simple  loops  of  a graph,  l or  this  purpose,  several  algorithms  exist 
(Johnson  lie).  Read  and  Tamil  1 1 *4 1 . S/vvarctiter  and  Lauer  (2e|'  that  operate  in  tune 
order  Vi  V +■  IEI),  and  space  order  VI  + T , where  V is  the  number  ot  loops  generated 
rhese  algorithms  are  easily  modified  to  generate  onlv  admissible  loops  without  adversely 
affecting  efficiency  . Since  each  loop  has  length  on  the  order  ot  \ L these  algorithms 
require  little  more  time  than  that  needed  for  output.  A graph  may.  of  course,  have  quite 
a few  simple  loops  exponentially  many  tin  I h,  in  fact,  in  the  worst  case.  One  can 
show  that  the  procedure  we  have  described,  like  the  simplex  method,  exhibits  exponential 
worst-case  asymptotic  behavior. 

In  practice,  however,  one  does  not  encounter  such  behavior.  1 he  sets  ot  inequalities 
that  arise  from  verification  conditions  usually  have  the  form  of  transitivity  chains.  The 
corresponding  graphs  are  treelike,  seldom  having  more  than  a few  loops.  Most  ot  the 
loops  that  do  occur  are  2-loops,  which  are  easily  tested  at  the  time  the  graph  is 
constructed. 

V.  lVatt  l IS)  has  noted  that  these  sets  often  fall  within  what  he  has  termed 
'»7 \iration  theory.  All  the  inequalities  of  such  sets  are  of  the  form  \ x \ + c.  The 
residue  of  a loop  whose  labeling  inequalities  are  of  this  form  is  given  by  one  ot 
x l , -1.  m\  v-l.  I,  m\  where  m is  the  sum  of  the  constants  c around  the  loop.  The  graph 


r 


i t v»r  a set  S tit  separation  theory  is  tints  its  own  closure,  so  the  main  theorem  ol  the  last 

section  reduces,  in  this  case,  to  halt's  observation  that  such  a set  S is  infeasible  it  and 
only  it  the  sum  ot  the  constants  around  some  simple  loop  is  negative,  halt  notes  that 
this  condition  can  be  tested  in  order  (IVI  + IFIF  tune  by  taking  a max  + transitive 
closure  ol  the  incidence  matrix  of  the  graph  In  practice,  however,  it  may  be  more  effi- 
cient to  generate  loops  using  one  ot  the  algorithms  mentioned  earlier 

Note  that  a set  of  inequalities  m separation  theory  with  integer  constants  is  integer 
feasible  it  and  only  if  it  is  real  feasible.  While  the  main  theorem  theretore  decides  integer 
feasibility  in  this  case,  it  cannot  decide  integer  teasibility  in  general.  It  has  been  observed 
l J 1 ! . however,  that  the  transformations  H’edsoc  |3)  describes  tor  reducing  formulas  in 
mtege.  arithmetic  to  sets  of  inequalities  tends  to  produce  sets  that  are  integer  feasible  il 
and  only  it  they  are  real  feasible.  Vhe  mam  theorem  thus  provides  a useful,  but  not  com- 
plete, test  for  integer  feasibility 
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5.  Strict  Inequalities 

Die  procedure  is  trivially  generalized  to  handle  strict  inequalities  tie.,  inequalities  ol 
the  form  ax  ♦ by  ^ cV  Let  an  admissible  loop  be  stru  t if  one  or  more  of  its  edges  is 
labeled  with  a strict  inequality.  A strict  loop  P with  residue  va,,,  b(>.  c,,N  is  tnh-usiblc  it 
a,,  * bp  3 0 and  cp  v 0.  It'  the  definition  of  closure  is  now  modified  in  such  a way  that 
new  edges  arising  from  strict  loops  are  labeled  with  strict  inequalities,  the  mam  theorem 

still  holds 


o.  Extension  to  Arbitrary  Sets  of  Inequalities 

Die  method  can  be  further  generalized  to  sets  of  inequalities  with  arbitrary  coeffi- 
cients and  arbitrary  numbers  of  variables. 

Vhe  basic  idea  is  illustrated  by  the  following  example.  Consider  the  set 
S * | x x > , v x.  z.  z **  > - \ + 1 , \ > 2 } 

Note  that  the  inequality  z v y - x + 1 has  three  variables.  As  shown  in  Figure  3.  we 
choose  two  of  the  three  tsay  z and  vl  as  the  endpoints  of  the  edge  corresponding  to  this 
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inequality  in  the  graph  G for  S.  The  term  (-x  + 1 ) becomes  the  "constant"  ot  this 
inequality  The  residue  of  the  only  simple  loop  ty  i v)  is  given  by 

\l.  -1.  0>  * <1.  -1.  + I) 

and  is  computed  “symbolically"  to  obtain  U.  -1.  -x  + 1\  Note  that  this  loop  is 
infeasible  unless  -\  + 1 > 0.  If  the  residue  inequalit>  -x  + 1 > 0 is  now  added  to  the 
graph,  an  infeasible  simple  loop  <v0\v(1t  results,  thus  making  S unsatistiable. 


* * V - * ♦ 1 


FIGURE  3 GRAPH  G FOR  |x  *»  v.  V v z.  z **  v - x «■  1.  x > 2| 


We  now  describe  the  procedure  for  an  arbitrary  set  S.  We  assume  that  the  variables 
of  S other  than  v (1  are  ordered  in  some  wav.  Each  variable  that  is  the  lowest  or  second 
lowest  ranked  variable  in  even  inequality  in  which  it  appears  is  said  to  be  a primary 
i unable.  We  adopt  the  convention  that  the  edge  corresponding  to  a given  inequality  is 
always  attached  to  the  two  nodes  corresponding  to  its  primary  variables.  If  it  lias  onlx  one 
primary  variable,  one  end  is  attached  to  v0.  and  if  it  has  no  priinan  variables,  both  ends 
are  attached  to  v0.  The  procedure  is  as  follows 

i 11  Compute  a closure  C'  of  the  graph  C.  for  S as  usual,  evaluating  residues  "sym- 
bolieallv"  as  in  the  example.  If  C'  has  an  infeasible  loop,  terminate  returning 
“unsatistiable."  Otherwise,  if  all  the  suitable*  of  S are  primary,  terminate 
returning  ’ suiistlable." 

iJl  Otherwise,  repeat  the  procedure  using  the  set  of  residue  inequalities  ot  Ct  in 
place  of  S. 
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Note  that  the  procedure  must  terminate  since  the  number  of  non-primary  variables  must 
decrease  each  iteration.  One  can  prove  as  an  extension  of  the  main  theorem  that  the  gen- 
eral procedure  is  complete  as  well  as  sound. 

R.  Turjan*  has  observed  that  any  set  of  inequalities  can  be  polvnomially  transformed 
to  one  with  no  more  than  three  variables  per  inequality  through  the  addition  of  new  vari- 
ables. The  inequality  w+x+y+z<  1.  for  example,  is  replaced  by  w + x < v.  w + x > v. 
v + y + 2 < 1.  For  sets  with  inequalities  having  no  more  than  three  variables,  only  two 
iterations  of  the  procedure  are  ever  required.  There  does  not  seem  to  be  any  fast  way  to 
transform  a set  of  inequalities  to  one  having  inequalities  with  no  more  than  two  variables. 


7.  Proof  of  the  Main  Theorem 

It  follows  from  Lemma  1 and  from  the  definition  of  closure  that  a set  S of  inequali- 
ties (each  having  no  more  than  two  variables)  is  satisfiable  if  and  only  if  S'  is  unsatisfiable, 
where  S'  labels  the  edges  of  a closure  of  the  graph  for  S.  If  we  define  a closed  graph  as 
one  that  is  a closure  of  itself,  the  main  theorem  can  thus  be  restated  as  follows: 

Theorem:  If  G is  a closed  graph  for  S,  then  S is  satisfiable  if  and  only  if  G has  no 
infeasible  simple  loop. 

The  proof  of  the  theorem  requires  a number  of  technical  lemmas.  Proofs  are  omitted  for 
the  more  trivial  of  these. 

Notation:  Where  P and  Q are  paths,  let  PQ  denote  the  concatenation  of  P with  Q. 

Lemma  2.  If  P and  Q are  admissible  paths,  then  PQ  is  admissible  if  and  only  if  by  and 
ap  are  of  opposite  sign. 

Notation:  Let  T = (a,  b,  c)  be  a triple  of  reals.  Then  T'’  denotes  the  triple  <b,  a.  c>. 

Lemma  3.  If  Tj  ,T2  are  triples,  T(  * T,  = (T,  * T, ) . 

Corrollary  4.  If  Q is  the  reverse  of  an  admissible  path  P.  then  rp  = rj. 

Corollary  5.  The  reverse  of  an  infeasible  loop  is  itself  infeasible. 
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l.t-rn»k i f».  Ain  permutation  ol  an  infeasible  pernmtable  loop  in  infeasible. 

f't.  Sav  I'  in  infeasible  ami  P'  in  a permutation  ol  I*  1 lion  there  are  put  (in  0 ami  K such 
that  P * OR  ami  P'  3 RO-  Urns. 


ami 


i,,  3 <kaQaR . -kbybR  . ktc(,aR  - cR  by  »> 


rl>  ik  aR  ay . kbRby,ktcRay  ~v'ybRls  • 


. > 'K  it- 

where  k 3 r- — . amt  k 3 r— , 


Note  that  In  admissibility  ol  P ami  P‘.  both  aR  am 


a , are  nonzero.  B\  mfeasibility  ol  P,  aR  ay  - bybR  3 0 ami  kiet)aR  - cRbyl  < 0. 


' cg  *'k 


~ h0  < 0 


a*M-r~c*) <0 


cO  *\> 


R 


0 t since  aR  ami  b0  have  opposite  signs) 


k’'cRaO  -CgbR)<0 

Recalling  that  aRay  - bybR  3 0.  we  thus  ha\e  that  P’  in  infeasible 

0 I IV 
w 

,\i> ration  Where  u,  w are  reals,  let  u < \ mean  that  u < \ it  w > 0 and  u ' v il  « s 

cp 

l\\thiition  Where  P in  an  admissible  path,  the  discriminant  d|(  ol  l*  in  given  In  . 

a,,  + I'p 


Note  that  an  infeasible  loop  in  one  with  discriminant 


l.ctnntd  It  PQ  is  an  admissible  loop  from  v„  to  v().  then  PQ  is  infeasible  iff  d(l  • d0 
Jp 

lit  l*|>  ''  “Q- 

.Vo muon  In  the  following,  let  (a,  . b, . c,>.  (a,.  b , . c,  >.  \aJt  b,.  c, >,  am)  (ap.  b|t.  cp>. 
respectively,  denote  the  residues  of  I’, . I’,.  P,.  and  P. 


Lemma  S.  If  G is  closed  and  has  an  infeasible  loop  from  v()  to  v0.  G has  an  infeasible 
simple  loop. 

/V:  Let  P be  a shortest  infeasible  loop  from  vQ  to  v0  in  G.  If  P is  simple,  we  are  done. 
Otherwise,  since,  by  admissibility,  the  intermediate  vertices  of  P are  distinct  from  \0, 
P can  be  expressed  P,P,P,.  where  P,  is  simple.  We  claim  that  P,  is  also  infeasible. 

Suppose  not.  Then  either  a,  + b,  3 0 and  c,  > l).  or  dp,  is  finite.  In  the  for- 
mer case,  a,  and  b,  have  opposite  signs.  It  follows  from  Lemma  2 that  b,  and  a, 
must  as  well,  hence  P,  P,  is  admissible.  Now  since 


a. 


■,  p : = ^0.  • ct  ■ * 3 |;U|  "*'i  *’:•  ci a:  ~ cj  N 


we  have: 


d 


p 


1 1 ~ v\  bj  c, 

-b,  b,  b. 


c > 


Since  P is  infeasible,  we  have  from  Lemma  7 that 


c,  a, 

— + dP|  > dP, 


Thus, 


• • 1 


b,dp 


\ 


+ *V*p,  < *V*p, 


(since  a,  and  b,  have  opposite  signs) 


II 


(smcc  Ci  > 0) 


'V'r,  ^ 

b, 

Jp,  ''  jp, 

•* » 

dp  > (since  b,  anil  a,  are  of  opposite  sign). 

But  then  I’,  1‘,  is  infeasible  by  lemma  contradicting  our  assumption  that  !‘  is  the 
shortest  such  loop. 

Now  if  dp,  is  finite,  the  closedness  ot  (.'■  provides  that  some  vertex  \ on  P, 
must  be  connected  to  \((  via  an  edge  I labeled  a\  **  c,  where  c a is  the  discriminant 
ot  some  cyclic  permutation  P‘,  (possibly  - P,  ) ot  l\.  We  now  have  three  cases 

Case  I.  P,  is  not  permuUble. 

I hen  P,  = P, , a 3 a,  * h , . c = c,.  and  by  Lemma  a,  and  b,  are  ol  the  same 
sign.  Also,  a must  be  ot  this  sign,  hence  both  P,  I and  I P,  are  admissible.  An 
argument  similar  to  the  one  above  gives  that  one  or  the  other  of  P,  l , I P,  must  be 
infeasible,  contradicting  the  shortness  of  P. 

Case  II.  P,  ix  perimitable  and  P,  “ P,. 

In  this  case,  we  have  from  Lemma  2 that  a,  and  b,  have  opposite  signs,  hence  b, 
and  a,  do  as  well.  \n  argument  similar  to  that  given  earlier  shows  that  one  of 
P Pt,  P,  I . and  I P,  must  be  infeasible,  again  contradicting  the  shortness  of  !\. 

Case  III.  P,  is  permutahle  and  P,  * P,. 

let  P4  be  the  initial  subpath  ot  P,  which  terminates  at  \,  and  let  Ps  be  the  final 
subpath  ot  P,  which  originates  at  \ (so  that  P,  = P4PSI.  In  this  case,  it  can  be 
shown  that  P,  P,  is  admissible,  that  one  of  P(P4L,  IIVP,  is  admissible,  and  that 
one  ot  these  three  paths  must  be  infeasible.  1 he  shortness  of  P is  thus  once  again 
contradicted. 

Q.l  ,l>. 


i: 


mm 


Theorem.  Let  G he  a closed  graph  tor  S.  Then  S is  satist'iable  if  and  only  if  G has  no 
simple  infeasible  loop. 

Pf.  It  follows  front  Lemma  1 that,  if  G has  a simple,  infeasible  loop,  S must  be  unsatis- 
fiable.  Conversely,  suppose  G has  no  such  loop.  We  will  show  that  S is  satist'iable 
by  constructing  a solution. 

Let  Vj vf  be  the  variables  of  S other  than  v0.  We  construct  a sequence 

?0.  Vj vr  of  reals  and  a sequence  Gfl.  G( .....  Gf  of  graphs  inductively  as 

follows: 

( 1 ) Let  v0  = 0 and  GQ  = G. 

( 2)  Suppose  \\  and  G;  have  been  determined  for  0 < i < j < r.  Let 

supj  = min  | dpIP  is  an  admissible  path  from  v.  to  vQ  in  G._(  and  ap>0|. 

inf  = max  |dplP  is  an  admissible  path  from  v0  to  v.  in  G._j  and  bp  < 0[. 

(where  it  is  understood  that  minO  = and  ma\0  = -<»).  Then  let  v.  be  any 
value  in  the  interval  [infj,  sup.  |.  (We  show  momentarily  that  intV  < supj.) 
Let  G.  be  obtained  from  G._,  by  adding  two  new  edges  from  w to  v0, 
labeled  v ^ ?j  and  v.  > v . respectively. 

To  ensure  that  the  Vj's  and  Gj’s  are  well  defined,  we  must  show  that,  for 
1 < j < r.  inf.  < supj.  It  will  then  remain  to  show  that  the  Vj’s  do  indeed  give  a 
solution  for  S. 

We  need  the  following  claim: 

Claim.  (i)  For  1 < j < r.  inf  ^ supj 

(iO  For  0 < j < r,  Gj  has  no  infeasible  simple  loops. 

Pf.  By  induction  on  j. 

Basis,  j = 0. 

In  this  case,  (i)  holds  vacuously,  and  (ii)  holds  since  G0  = G. 

Induction  Step.  0 < j < r. 

For  (i),  suppose,  to  the  contrary,  that  infj  > supj.  Then  in  Gj_(  admissible 

paths  P( . P,  exist  from  v()  to  w and  Vj  to  vQ.  respectively,  with  bP)  < 0, 
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aP>  >0,  and  dP|  > dP>.  By  Lemma  2.  Pf  P,  is  an  admissible  loop,  and  by 
Lemma  7,  P,  P,  is  infeasible.  By  Lemma  8.  then.  Gj  ( has  a simple  infeasible 
loop,  contradicting  (ii)  of  the  induction  hypothesis. 

For  (ii).  suppose  G^  has  an  infeasible  simple  loop  P.  Since  G(1  has  no 
such  loop,  and  since  the  loop  formed  by  the  two  new  edges  added  to  G._,  to 
obtain  G;  is  not  infeasible.  P (or  its  reverse)  must  be  of  the  form  P'E,  where  E 
is  one  of  the  two  new  edges  (say  the  one  labeled  v.  < C;  the  other  case  is 
handled  similarly),  and  P’  is  a path  from  vQ  to  v\  in  G._(.  But  then,  by 
Lemma  7,  dp.  > dp  = Vj.  contradicting  ^ > in f^  > dp..  (Note  that  bp  < 0 
from  the  admissibility  of  P'E.) 

Q.E.D. 

It  now  remains  to  show  that  the  ?7s  satisfy  S.  So  let  a\  + by  ^ c be  an  inequality 
of  S.  We  claim  that  ax  + by  < e.  We  treat  the  case  in  which  a > 0 and  b < 0;  the 
other  cases  are  argued  similarly.  Let  E be  the  edge  labeled  a\  + by  c in  Gf.  Then, 
where  Et  is  the  edge  labeled  $ < x in  Gf,  and  E,  is  the  one  labeled  y < v.  Ej  EE, 
forms  an  admissible  loop.  The  residue  of  this  loop  is 


<0.  -1.  -$>  * (a.  b.  c>  * <1.  0.  = <0.  0.  -ax  - by  + e> 


Since,  by  the  claim  proved  above,  and  by  Lemma  8,  Gr  has  no  infeasible  loops  from 
v()  to  v(,.  we  have  -ax  -by  + c > 0.  Thus  ax  + by  < c as  required. 

Q.E.D. 
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